HeadsUp (we are not associated with this vendor)

The statistics are not unexpected for large corporate sites!
Source http://www.itsecurityportal.com/itsecurity_news.asp?articleid=259708

"Findings of the Promisec summary audit revealed that 25,090 (13%) of the
corporate PCs surveyed had unauthorised USB devices attached to them,
opening the door to data loss and the opportunity for USB-bourne viruses and
malware to enter the corporate network. 7,720 (4%) of corporate PCs had
peer-to-peer (P2P) applications installed. 2895 (1.5%) of the corporate PCs
did not have the latest Microsoft service packs and 3,281 (1.7%) had
anti-virus monitoring and remediation issues. 2,316 (1.2%) of the 193,000
audited endpoints were without required third party desktop security agents.
Finally, 1582 (0.8%) of endpoints had unauthorised remote control software,
and a lesser percentage had unauthorised and unprotected shareware."

Think about the implications for the person who asked the question regarding
to protecting over Intellectual Property theft!

Regards

Rob Harmer
Director
PCProfile
Adelaide
South Australia
Tel +61 (0) 448 650 227
Fax +61 (0) 8 8265 1961
mailto:pcprofile (at) internode.on (dot) net [email concealed]
www.pcprofile.com
=======================================
Reduce software compliance risk today!
PCProfile Snapshot will quickly generate a "managers view" of
the level of exposure you face with software, fonts, music and
movie files on your PC based systems!
=======================================
PC audit solutions for managers since 1991

___________________________________________

-----Original Message-----
From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]] On
Behalf Of Maddison, Kirk
Sent: Friday, 6 July 2007 5:56 PM
To: focus-ms (at) securityfocus (dot) com [email concealed]
Cc: Michael van Zwieten
Subject: RE: USB device control software

Mike,

If you're on a tight budget, or don't want to pay for something you can
already do with your current investment, it is possible to create an
custom ADM file for group policy to have the same effect.

1) HOWTO: Use Group Policy to disable USB, CD-ROM, Floppy Disk and
LS-120 drivers
http://support.microsoft.com/kb/555324

2) Disabling USB Storage With Group Policy

http://www.windowsdevcenter.com/pub/a/windows/2005/11/15/disabling-usb-s

torage-with-group-policy.html

Depending on your AD structure you'll probably find that this will be
adequate for your needs. That is unless you need some kind of real time
control, that these applications offer.

Hope this offers you a good alternative to the other options!

Kirk

-----Original Message-----
From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]]
On Behalf Of Michael van Zwieten
Sent: 05 July 2007 20:52
To: focus-ms (at) securityfocus (dot) com [email concealed]
Subject: USB device control software

Hi group... I'm looking for a good USB device control software that
would prevent people from plugging in USB drives, USB keys, firewire,
reading/writing to floppy's/CD's/etc. and control this all with Group
Policy. I'd like to allow some users or groups to be able to use these
devices, but have the majority of our users blocked from using them.

I've found 2 solutions sofar, and was wondering if you all had any
experience with these, and what your thoughts are? Or if you have a
better solution or suggestion?

First one is "Sanctuary Device Control" from SecureWave:
http://www.securewave.com/usb_security.jsp?rpLangCode=1

Second one is "DeviceLock" from Smartline:
http://www.protect-me.com/dl/

Thanks much in advance for your responses!

Take care,
Mike

________________________________________________________________________

This e-mail has been scanned for all viruses by Star. The service is
powered by MessageLabs. For more information on a proactive anti-virus
service working around the clock, around the globe, visit:
http://www.star.net.uk
________________________________________________________________________

The following are all part of Home:

Stonham, Home Scotland, Live Smart @ Home, Copeland Homes, Nashayman
Housing.

Home Group Limited* (Charitable I & P Society no. 22981R); Home in Scotland
Limited** ( Charitable I & P Society no. 1935R(S). Scottish Charity no.
SC005247); Live Smart @ Home Limited* ( Registered in England under no.
03402204); Home Group Developments Limited* ( Registered in England under
no. 04664018).

* Registered office address: 2 Gosforth Park Way, Gosforth Business Park,
Newcastle upon Tyne NE12 8ET.

** Registered office address: Q Court, Quality Street, Davidson's Mains,
Edinburgh EH4 5BP.

Confidentiality: this email and any attachments sent with it are intended
only for the use of the person(s) named above, and are confidential. If they
have come to you in error you must not act upon them, nor must you copy
them, print them or show them to anyone else. Please notify the sender as
soon as possible by replying to this email, and then delete this email (and
its attachments) from your system. If you require assistance please
telephone our Information Systems
Service Desk on +44 (0) 845 155 3222.

Security Warning: email transmission cannot be guaranteed to be secure or
error free. The sender does not accept any liability for any errors or
omissions in the contents of this notice that arise as a result of email
transmission. If you require verification of this email or any attachment
sent with it, please request a hard copy version.

Viruses: in keeping with good computing practice we take reasonable measures
to scan emails and attachments prior to their transmission. However, it is
your responsibility to take precautions to check for and to protect against
viruses. We accept no liability for loss or damage caused by any virus
transmitted by this email. You should carry out your own virus check before
opening this email and any attachment(s) sent with it.

________________________________________________________________________

This e-mail has been scanned for all viruses by Star. The
service is powered by MessageLabs. For more information on a proactive
anti-virus service working around the clock, around the globe, visit:
http://www.star.net.uk
________________________________________________________________________

[ reply ]